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MHK^ H 04 L 9/00 



CnOCOB BJIOMHOrO inH4>POBAHH5I JIHCKPETHOH HH*OPMAIIHH 

H3o6peTeHHe OTHOCHTC^ K 06jTaCTH aJieKXpOCB^IBH H BBIHHCJIHTeJIbHOH Tex- 

HHKH, a KOHKpeTHee K o6jTacTH KpHnTorpa4)HHecKHX cnoco6oB h ycxpoHCTs 

flJlH mH(J)pOBaHHH COOSmeHHH (HH4)OpMaij;HM). B COBOKynHOCTH npH3HaKOB 

3aaBJiHeMoro cnoco5a HcnoJibsyioTCii cjieayiomHe TepMHHbi: 

-ceKpeTHbiH KJTK)^ npeflCTaBJDieT us ce5^ KOM6HHaiiHio 5htob, H3BecTHyK) 

TOJibKO 3aKOHHOMy nojib30BaTejiK); 

-KJiiOH mH4)poBaHHji npeflCTaBJinex h3 ce6^ KOMGHHaiiHio 6htob, Hcnojib3y- 

CMyK) npH inH4)poBaHHH HH(J)opMaiiHOHHbix CHrHajioB flaHHbix; KJiiOH inn4)po- 

BaHH)i jiBJiKeTCH CMeHHbiM sjieMCHTOM mH(J)pa H Hcnojib3yeTC)i npeo5pa- 

30BaHHH flaHHOrO C005meHHjI HJIH flaHHOH COBOKynHOCTH C006meHHM; KJIIOH 

mH(J)poBaHH^ $opMHpyeTC5i no fleTepMHHHpoBaHHbiM npoueflypaM no ceKpex- 
HOMy KJiiOHy: b psijie uin^poB b KanecxBe KJiiona mH(})poBaHH;i Hcnojibayexoi 
HenocpeflCTBeHHo ceKpexHbm kjiioh; 

-uindj^p npezicxaBJiJiex co6om coBOKynnocxb ajieMeHxapHbix maroB npeo5pa- 
30BaHH5i BxonHbix ziaHHbix c iicnojib30BaHiieM mH4)pKnioHa; mH(J)p Mo:a!:ex 
6bixb peajiH30BaH b BH^e nporpaMMbi fljia 3BM hjih b snjie oxaejibHoro 3JieK- 
xpoHHoro ycxpoHCXBa;- 

-no^KJiiOH npeflcxaBJiiiex co6oh nacxb KJiiOHa mH4)poBaHHJi, Hcnojib3yeM>TO 
Ha ox^ejibHbix sjieMeHxapHbix marax mH(J)poBaHHJi; 

-mH4)poBaHHe ecxb npoijecc, peajiHsyiomnn HeKoxopbin cnoco6 npeoGpa- 
30BaHHii flaHHbix c Hcnojib30BaHHeM mH(})pKJiioHa5 nepeBOflHuiHH aaHHbie b 
KpHnxorpaMMy, npeflcxaBJi«K)nj;yio coSoh nceBaocjiynaHHyio nocjieaoBaxejib- 
Hocxb snaKOB, h3 KoxopOH nojiyneHHe HH4)opMamiH 6e3 3HaHH^ KJiiona mH- 

(J)pOBaHHjI npaKXHHCCKH HeBbinOJIHHMO; 

-flemH4)poBaHHe ecxb nponecc, o6paxHbiH npoiieaype uiH^poBaHH^; ne- 
mH4)poBaHHe o6ecneHHBaex BoccxanoBjieHHe HH(|)opMaiiHH no KpnnxorpaMMe 
npn 3HaHHH KJiiona mH(})poBaHHH; 

-KpnnxocxoHKocxb jiBJiiiexoi Mepon Hafle:acHocxM saiunxbi MH(l)opMaiiHU h 
npeflcxaBJi^ex C060H xpyaocMKocxb, HSMepeHHyio b KOjin^ecxBe sjieMCHxap- 
Hbix onepaizHH, Koxopbie neoSxoflHMO BbinojiHHXb rjir BOCCxaHOBJieHHH nn- 
4)opMamiH no KpnnxorpaMMe npn 3HaHHH ajiropnxMa npeo6pa30BaHH«, ho 
6e3 3HaHH)i KJiioHa mH({)poBaHHJi. 



HsBecTHM cnoco6i>i 6jTOHHoro lUH^poBaHHH flaHHbix, CM. HanpHMep CTan- 
AapT CmA DES [y.RvL^^vi, M.3.XejiJiM3H. SamHmeHHocTb h hmhtoctoh- 
KocTt: BseAeHHe b KpHnTorpa4)Hio// THH9P. 1979. T. 67. N. 3. C. 87-89], 
cnoco5 uiH(})poBaHHH no naTCHTy CfflA N 5222139, ot 22 Hiona 1993 r., mvi<i>p 
FEAL-1 H KpHnToajiropHTM B-Crypt [C.Ma(})THK. MexaHHSMbi samHTti b ce- 
Tsix 9BM.- M., Mnp, 1993. C. 49-52]. B HSBecTHMx cnoco6ax mH4)poBaHHe 

6JIOKOB flaHHtlX BMnOJIHaKDT HyxeM (})OpMHpOBaHHa KJIIOHa mH4)pOBaHHfl B 

BHjce coBOKynHOCTH noflKJiioHeH, pasSHeHHH npeo5pa3yeMoro 6jioKa flaHHwx 
Ha noflGjioKH h noonepe^iHoro HSMeneHHa nocjieflHHx c noMombio o^epa^HH 
noflCTanoBKH, nepecTanoBKH h apH4)MeTHHecKHx onepauHH, BbinojinaeMbix 
Hsm TeKymHM noflSjioKOM h xeKymHM noflKJiHDHOM. 

O^HaKO, H3BecTHbie cnoco6br anajiorH He o6jiaflaK)T flocxaTO^HOH ctoh- 
KocTbK) K flH4){})epeHnHajibHOMy KpHnToanajiHsy [Berson T.A. Differential 
Cryptanaiysis Mod 2^^ with application to MD5// EUROCRYPT'92. Hun- 
gary, May 24-28, 1992. Proceedings. P. 67-68], t.k. ann Bcex bxoahhx 
6J10K0B flaHHbix fljia sa^aHHoro mara npeo6pa30BaHHH HcnojibsyexcH orvih h 

TOT yKB nOflKJIIOH B HeHSMeHHOM BHfle. 

HawGojiee 6jih3khm no cboch TexHH^ecKOH cymnocTH k saaBJiaeMOMy cno- 
co6y 6jioHHoro mH(})poBaHHa aBJiaexca cnoco6, onncaHHbiH b Pocchhckom 
CTaHflapTe KpHnTorpa(})HHecKOH 3amHTbi /laHHbix [CTaHflapT CCCP POCT 
28147-89. CHCTeMH o6pa6oTKH HH(J)opMa^HH. 3amHTa KpHnTorpa4)HHe- 
cKaa. AjiropnTM KpHnTorpa(|)H^ecKoro npeo6pa30BaHHa]. Cnoco6-npoTOTHn 
BKJiioHaeT B ce6a (J)opMHpoBaHHe KJiioHa iuH(i)poBaHHH b Bime nocjiejciOBaTejib- 

HOCTH H3 8 nOHKHIOHeH flJlHHOH 32 6HTa, pa36HeHHH BXOflHOrO 64-6HTOBOrO 

6jioKa flaHHbix na asa, 32-6HTOBbix nofl6jioKa Bi n B2 n noonepe^iHOM npe- 
o6pa30BaHHH nofl6jioKOB. Oahh mar npeo6pa30BaHHH nofl6jioKa, nanpHMep 
nofl6jioKa B2, saKJiiOHaeTCH b HajioaceHHH na na Hero TeKymero noflKJiioHa 
Qi, HBJiaiomerocH (J)HKCHpoBaHHbiM ansi ja;aHHoro mara, c noMombio onepaiiHH 
cjio^eHHa no Moayjiio 2^^ (S) b cootbctctbhh c (|)opMyjioH B2 := ^affiQi, rne 
:= — 3HaK onepaiiHH npncBaHBaHHH, 1 < 2 < 8, nocjie Hero na^ nojiyncH- 
HHM HOBbiM SHaneHHeM no^];6jiOKa B2 BbinojTHaioT onepanHio noacTanoBKH, 
saTeM onepamiK) ^HKJIHHecKo^o c^BHra BJieBo na ojiHHHaOTaTb 611T, T.e. na 
oflHHHajDtnaTb flBOHHHLix pa3pfljQ;oB B CTopoHy cTapmHX pa3pHflOB, a 3aTeM Ha 
nojiyneHHoe SHaneHHe B2 HaKnaAbiBaioT nofl6jioK Bi c uoMouxhio onepaiiHH 
nopa3pajiHoro cyMMHpoBaHHH no MOflyjiio asa (0) b cooTBeTCTBHH c (})op- 
MyjioH B2 := B2® Bi. OnepanHH noflCTanoBKH BbinojinaeTca cjieflyioiUHM 
o6pa30M. non6jioK pa36HBaeTCH na 8 flBOHHHbix BeKTopa ajihroh no 4 6ht. 

Ka^flblH ZlBOHHHblH BCKTOp SaMeHHexCH ^IBOHHHHIM BeKTOpOM H3 TaSJIHnbl 

noflCTanoBOK. Bbi6paHHbie H3 Ta6jiHi];bi noflCTanoBOK 8 4-6HTOBbix eeKTopa 



oGteflKHfllOTCa B 32-5HTOBMH flBOHHHMH BCKTOp, KOTOpWH H aBJI«eTCH Bbl- 

xo/iHMM cocToaHHeM nozi;6jiOKa nocjie BMnojiHeHHa onepaijHH noacTaHOBKH. 
Bcero BMnojiHHeTca 32 aHajiorHHHMx mara HSMeHeHHH nofl6jioKOB, npHHCM 
ziJiH Bcex npeo6pa3yeMbix bxoahmx 6jiokob aaHHbix na 4)HKCHpoBaHHOM mare 
npeo6pa30BaHHH noja5jiOKOB Hcnojibsyexca o^ihh h tot :ace hozikjiioh c hchs- 
MeHHMM sHaneHHeM. 

OflHaKo, cnocoS-npoTOTHn HMeeT HeaocTaTKH, a HMeHHO, npn nporpaMM- 
HOH peaJIH3a^HH oh He o6ecneHHBaeT CKopocxb mH4)poBaHHa 6ojiee 1 M6ht /c 
[AnapeeB H.H. O HeKOTopbix HanpaBJieHHax HccjieaoBaHHH b oSjiacTH 3a- 

LLIHTbl HH(})OpMaHHH//C6opHHK MaTCpHaJIOM Me»CZi;yHapOJ(HOH KOH(J)epeHI]:HH 

'Be3onacHocTb HH(i)opMauHH'. MocKBa, 14-18 anpejia 1997. M. 1997. C. 96], 
^To He no3BOJiJieT Hcnojib30BaTb ero ana. mH(|)poBaHHa naHHbix b cpe^cTBax 
sainHTbi peajibHoro MacmTa6a BpeMeHH. 9tot HeaocTaTOK CBHsan c TeM, 

HTO flJlH oSecneHBHHH CTOHKOCTH K AH4)4)epeHHHaJlbHOMy KpHnToaHajiHsy B 

cnoco6e npoTOTHne Hcnojib3yeTCH 6ojibmoe hhcjio onepauHH noflCTanoBKH 
Hafl 4-6HTOBbiMH nofl5jioKaMH npeo5pa3yeMoro 6jioKa flaHHbix, jjjia Bbinojine- 
HHa Ka:ac/ioH 113 KOTopbix (npH nporpaMMHOH peajiHsauHn) MHKpo^po^eccop 
ocymecTBJiHeT mhofo sjieMeHTapHbix KOMaHjo;, mto o6ycjiOBJieHO necooTBeT- 
CTBHeM noflCTanoBOK xaKoro THna c 4)opMaTOM npezicTaBJieHHa aaHKbix b 
9BM. 

B ocHOBy H3o6peTeHHfl nojio^eHa saaana paspaGoTaxb cnoco6 uiH^po- 
BaHHfl, B KOTopoM npeo6pa30BaHHe BxoflHbix flaHHbix ocyiuecTBJiflJiocb 6bi 
TaKHM o6pa30M, ^To6bi o6ecneHHBajiocb yMenbuieHHe HHCJia sjieMeHTapHbix 
onepaHHH npeo5pa30BaHHa, npHXOAHiUHXcfl Ha o^hh 5iit bxoahhx jianHbix, 
npH oflHOBpeMeHHOM o6ecneHeHHH BbicoKOH ctohkocth k flH4)(})epeHHHajib- 
HOMy KpHHToaHajiHsy, 6jiaroflapa 'qeMy noBbimaeTca cKopocTb niH^poBaHHH 
npH nporpaMMHOH peajiH3au;HH. 

HocTaBJieHHaa 3aj5a^a flocTwraeTca tbm, hto b cnocoSe 5jioHHoro uiH(J)po- 

BaHHa XliHCKpeTHOH HH(J)OpMaHHH, BKJIIOHaiOIHeM (})OpMHpOBaHHe KJlIOHa UIH- 

(})poBaHHH B BHfle coBOKynHocTH noziKnioHeH, pa36HeHne 6jioKa aaHHbix na 
N > 2 HOflGjioKOB H nooHepeztHoe npeoGpasoeaHHe noa6noKOB nyTeM Bbinon- 
HeHHa flByxMecTHOH onepauHH na^ noja;6jioKOM h hoakjiiohom hobmm corjietCHo 
H3o6peTeHHK) HBJiaeTCii TO, HTo nepea BbinojiHeHHeM ziByxMecTHOH onepaunn 
Hafl z-TbiM nofl6jioKOM H noflKJiiOHOM Hafl noflKJiioHOM BtmojiHaioT onepauHK) 
UHKJiHHecKoro cflBHra, saBHcamyio ot ^-Toro noji;6jiOKa, r^e j ^ i. 

Bjiaroziapa TaKOMy pemeHHio CTpyKxypa noflKJiiOMeH, HcnojibByeMbix na 
3aj3aHHOM mare iun(J>poBaHHa, sasHCHT ot npeo6pa3yeMbix flaHHbix h xeM 
caMbiM Ha jiaHHOM mare npeo6pa30BaHHH ajih pasjiHHHbix BxoflHbix 6jiokob 
Hcnojib3yK)Tca pasjiH^Hbie MOflH(J)H^HpoBaHHbIe SHanenHX noflKJiioHeH, 6jiaro- 




4 



aap^ HCMy o6ecneHHBaeTCH BbicoKaa ctohkoctb k zi;H4)(|)epeHiiHajibHOMy KpH- 
nToaHajiH3y npn oj^HOBpeMCHHOM yMeHbmeHHH HHCJia BtinojiH^ieMbix onepa- 
nnvL npeo6pa30BaHH5i, hto h o6ecneHHBaeT noBMmeHHe CKopocxH KpnnTorpa- 
(J)MHecKoro npeo6pa30BaHHH. 

Hn^e cymHocTb sajiBJi^eMoro HsoGpeTeHHa 6ojiee noflpo5HO past^CHiieTca 
npuMepaMH ero ocymecTBJieHiui co ccbiJiKaMH Ha npHJiaracMbie HepTe:>KH. 

HsoSpexeHHe noacHjieTC^ o5o6meHHOH cxcmoh KpHnTorpa4)HHecKoro npe- 
o6pa30BaHH5i 5JIOKOB ztaHHMx Ha ocHOBe 3a5iBJi5ieMoro cnocoSa, Koxopaji npezi;- 
cxaBJiena (pur. 1, r^e: onepauHOHHbm 6jiok OJXC — 5jiok ynpaBJiMeMOH 
onepauHH UHKjiHHecKoro CABHra; A n B — npeo6pa3yeMbie n-6HXOBbie no^- 

5jIOKI1; K2r, K2r~l — 3JieMeHXbI KJIIOHa mH4)pOBaHHjI (nOflKJTIOHIl) ; 3HaK0 

o5o3HaHaex onepaij;HK) nopaspH^Horo cyMMHpoBaHHii no Moayjiio flsa, 3HaK 
g — onepauHio cyMMiipoBaHH5i no Mo^yjiK) 2". ^H^iipHbie cnjiomHbie jihhhh 
oSosHanaiox mHHy nepeaaHH n-6HXOBbix cnrnajiOB, a :acHpHbre nyHKxnpHbie 
jihhhh — uiHHy nepeaa^H n ynpaBJiJiioiUHX cnrHajiOB, b KanecxBe Koxopbix 
Hcnojib3yioxcH 6HXbi npeo6pa3yeMbix nozi;6jioKOB. 

Onr. 1 noKa3biBaex ojxvm (r-xbiii) payHa mHcjDpoBaHH^i. B 3aBHCHMOcxH 
xpeSyeMOH CKopocxH npeo6pa30BaHHH Moryx 6bixb 3aflaHbi ox 8 flo 30 h Sojiee 
paynztOB. 

PaccMoxpHM KOHKpexHbre npHMepbi peajTHsaiiHH saHBJi^cMoro cnoco6a Kpn- 
nxorpa4)HHecKHX npeo6pa30BaHHH Sjiokob flBOHHHbix ziaHHbix. 
IIpHMep 1. 

B flaHHOM npHMepe no^iCH^excii mH(J)poBaHHe 64-5HX0Bbix 6jiokob flanHbix. 
Kjiioh mH4)poBaHH5i (f)opMHpyexcii b BHfle 16 noflKjno^eii Ki, K2, A3, ... A'32, 
Ka:^flbiH H3 Koxopbix HMeex fljinny 32 5hx. Bxoahoh 5jiok naHHbix pasGn- 
Baexc^ Ha nBa 32-6HX0Bbix nozi;5jiOKa A h B. IIlH(})poBaHHe BxoflHoro 6noKa 
OHHCbiBaexoi cjieflyiounHM ajiropHXMOM: 

1. YcxaHOBHXb cnexHHK HHCJia paynaoB r = 1. 

2. npeo6pa30Baxb noa6jioK B b cooxBexcxBHH c Bbipa^eHHeM: 

B:=B®{K2r<^A), 

rae K2r A o6o3HaHaex onepaiiHio iiHKJiHHecKoro cflBHra bjibbo na A 6hx, 
BbinojTHjieMyK) naa ho^ikjiiohom i^2r- 

3. npeo6pa30Baxb nojifonoK A b cooxbcxcxbhh c Bbipa^KeHHCM: 

A:=A^B, 

rfleffl — onepauiHH cyMMHpoBaHHJi no Mo^tyjiio 2^^. 

4. IIpeoSpasoBaxb nofl6jioK A b cooxBexcxBHH c Bbipa^KCHHeM: 



A := A®{K2r-i <^ B), 



r^e /^2r-i <§s: B o6o3HaMaeT onepauHio UHKJiHHecKoro CflBHra BJieBo na B 
6ht, BbinojiHHeMyio Has noflKJiio^oM A^2r-i- 

5. npeo6pa30BaTi> nofl6jTOK 5 b cooTBeTCXBHH c Bbipa:JKeHneM: 

B := BmA. 

6. EcjiH r ^ 16, TO npHpacTMTb cneTHHK r := r + 1 h nepeHTH k mary 2, 
B npoTHBHOM cjiy^ae CTOII. 

CoBpeMeHHbie MHKponpouteccopti 6bicTpo ocymecTBJiHioT onepaiiHio iim- 
KJiHHecKoro cflBura, b 3aBHCHMOCTH OT BHaHeHHH nepeMeHHOH, xpaHHmeHCJi b 
oflHOM H3 perHCTpoB. BjiaroflapH 3TOMy onHcaHHbiH ajiropHTM oSecne^HBaex 
CKOpocTb mii(f)poBaHiiH OKOJio 30 M6ht/c rjisi MaccoBoro MHKponpoijeccopa 
Pentium/200. 

IIpHBej^eHHbie npHMepbi noKasbiBaioT, hto npeflJiaraeMbiH cnoco6 6jioh- 
Horo mH4)poBaHHii flHCKpeTHOH HH4)opMaij;HH TexHHHecKH peajiH3yeM h no- 
3B0JiHeT peiUHTb nocTaBjieHHyio sajsany. 

SaHBJiseMbiH cnoco6 MoyKeT 6biTb pecLJiH30BaH, nanpuMep, b bhac npo- 
rpaMM ziJiH 3BM, o6ecneHHBaiomHx cKopocTHoe iuH(J)poBaHHe aaHHbix. 



ABTopbi: 




MacjioBCKHH B.M. 



MojiflOB^iH A. A. 
MojiflOB^H H.A. 
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OOPMyjIA H30BPETEHMH 



Cnoco6 6jioHHoro mH(J)poBaHH5i zmcKpeTHOH HH(J)opMai];HH, EKjno^aioiUHH 
(JiopMHpoBaHHe KJiioHa iiiH^poBaHMH B BHae coBOKynHocTH noziKJiioHeH, pa3- 
6HeHHe SjioKa ziaHHbix Ha TV > 2 noa6jiOKOB h noonepejiHoe npeo6pa30BaHMe 
no^6jioKOB nyxeM BbinojiHeHHji AByxMecxHOH onepaiiHn naa nozi:5jioKOM h non- 

KJIIOMOM, OTJIHHaiOmHHCH TGM, HTO nepefl BLinOJlHCHHeM flByXMCCTHOH 

onepaaHii nafl z-tbim nofl6jioKOM h noflKJiioHOM na^i; noflKJiioHOM BbinojiH^ioT 
onepai^HK) iiHKJiHHecKoro cflBHra, sasHCHmyio ot j-Toro noflGjioKa, rae j ^ 









CnOCOB BJlOHHOrO liJH0POBAHH51 flMCKPETHOM 

MH0OPMAL4MM 




0Mr.1. 
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PE<3E)EPAT 

CnOCOB BJIOMHOrO niH<I>POBAHHM HHCKPETHOH HH«)OPMAIIHH 
CnocoS 6jioMHoro mH(})poBaHH5i sHCKpeTHbix AciHHbix, BKJiio^aiomHH 4)op- 

MHpOBaHHe KJIIOHa mH(J)pOBaHH5I 

H306peTeHHe OXHOCHTCil K 06jiaCTH 3JieKTpOCBjI3II H BblHHCJIHTeJTbHOH TCX- 

HHKH, a KOHKpeTHee K o6jiacTH KpHnTorpa4)HHecKHX cnoco6oB H yCTpOHCTB 

ZIJI^ UIH^pOBaHH^ flaHHHX. 

LtejibK) H3o6peTeHHii iiBJi^exc^ noBbimeHH)i CKopocTii mH(J)poBaHHii. 

Cnoco6 BKJiioHaeT 4)opMHpoBaHHe KJiio^a mH4)poBaHii5i b BHji;e coBOKynHO- 
CTH no^iKJTioHeH, pa35HeHHe 6jiOKa aaHHbix Ha TV > 2 non5jiOKOB h noonepezi- 
Hoe npeo6pa30BaHHe nofl6jioKOB nyxeM BbinojiHeHHii ziByxMecTHOH onepamm 
HaA nozi;6jioKOM h noflKJiioHOM. OxjiHHaeTCji ox H3BecxHbix cnoco5oB xcm. 
Hxo nepe/i; BbinojiHeHHeM flByxMecxHOH onepaiiHH na^i i-xbiM nofl5jiOKOM ii 
noflKJiioHOM Hafl noflKJiioHOM BbinojiHHiox onepauHio miKJiHHecKoro cflBHra, 
3aBHC5imyio ox j-xoro nojtGjioKa, me j ^ 



O.H.-l, Hnji.- 1. 



